Home
A three-month live experiment by FireCompass reached top-three positions across multiple HackerOne leaderboards. Those same agents now run in a UAE sovereign instance, with customer data stored and processed within the country.
DUBAI, United Arab Emirates, 3 November 2026
FireCompass today announced the availability of a UAE sovereign instance of its agentic AI penetration testing and red teaming platform, hosted in a UAE data centre. In a three-month live experiment, FireCompass AI reached top-three positions across multiple HackerOne leaderboards, including first place in OWASP A01 and in the Up and Comers category.*
The UAE instance runs the same agents as the global platform, with customer data held within the country.
The instance was built for organisations in the UAE and the wider Gulf region that require security testing data to stay within the region. FireCompass works with enterprises and government organisations across the region.
Data Residency Requirements in the UAE
Organisations in banking, government, healthcare and critical infrastructure commonly set data residency as a condition of engagement. The UAE’s data protection landscape is layered, and each regime governs the handling and cross-border transfer of personal data within its own scope:
- Federal Decree-Law No. 45 of 2021, the UAE Personal Data Protection Law, which applies onshore
- Central Bank of the UAE requirements, which govern banking and credit data
- DIFC Law No. 5 of 2020, which applies within the Dubai International Financial Centre
- ADGM Data Protection Regulations 2021, which apply within Abu Dhabi Global Market
FireCompass built the UAE instance so that customers under each of these regimes can keep security testing data in the country.
Scope of the UAE Instance
The UAE instance provides:
- The full FireCompass platform: agentic AI penetration testing of web applications and APIs, agentic red teaming and attack surface discovery
- Customer data stored and processed within the UAE
The Same Agents as the Global Platform
The agents discover complex multi-stage attack chains, work that was earlier possible only for expert penetration testers, in a fully autonomous manner and with near-zero false positives. The UAE instance runs the same agentic AI platform as every other FireCompass deployment.
The leaderboard results and the methodology behind them are published here.
FireCompass is ISO 27001 and SOC 2 Type II certified.
Statements from FireCompass
Bikash Barai, Founder of FireCompass, said: “The UAE instance was built to meet the data residency requirements of enterprise and government customers in the region. It runs the same agents and delivers the same capability as the global platform, with customer data held within the country. FireCompass is committed to its customers in the UAE and the wider region, and this instance is part of that commitment.”
Preekshit Gupta, VP and Head of Sales, India and ROW, FireCompass, said: “Data residency is a standing requirement for regulated organisations in the UAE. The local instance allows FireCompass to serve these organisations within the terms their regulators set.”
Availability
The UAE sovereign instance is available now. UAE organisations can talk to a security expert to discuss onboarding.
Media contact
Priyanka Aash
FireCompass Technologies Inc.
+91-8971875069
[email protected]
*HackerOne is a trademark of HackerOne Inc. HackerOne has not sponsored, verified, approved or endorsed this release. HackerOne rankings are dynamic and recalculated daily.
About FireCompass
FireCompass is an agentic AI platform for autonomous penetration testing and red teaming across web, API and infrastructure. It discovers shadow applications, multi-stage attack paths, credential reuse, business logic flaws and lateral movement with near-zero false positives. FireCompass holds 30+ analyst recognitions across Gartner, Forrester and IDC, and is trusted by Fortune 500 companies. More at firecompass.com.
